4.3
CVE-2006-3956
- EPSS 1.31%
- Veröffentlicht 01.08.2006 21:04:00
- Zuletzt bearbeitet 16.06.2026 22:28:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) AccountUsername and (3) Message parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Total Online Solutions ≫ Advanced Webhost Billing System Version2.2.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.31% | 0.67 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/21296
http://securityreason.com/securityalert/1317
http://www.osvdb.org/27629
http://www.securityfocus.com/archive/1/441532/100/0/threaded
http://www.securityfocus.com/bid/19226
http://www.vupen.com/english/advisories/2006/3061
https://exchange.xforce.ibmcloud.com/vulnerabilities/28069